Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lYyVDiI5T-DnkuuBfd6M24o4wSY.cer
File: lYyVDiI5T-DnkuuBfd6M24o4wSY.cer (raw, json)
Hash identifier: Z0/Gmdn8Bv4WGFHi1+T1VHg1axVm9TwT9htaUStpuds=
Subject key identifier: 95:8C:95:0E:22:39:4F:E0:E7:92:EB:81:7D:DE:8C:DB:8A:38:C1:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019121BA04C6EA2E5D11606CE6363E4F19E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.nap.re/repo/pongery/5/958C950E22394FE0E792EB817DDE8CDB8A38C126.mft
caRepository: rsync://rpki.nap.re/repo/pongery/5/
Notify URL: https://rpki.nap.re:3030/rrdp/notification.xml
Certificate not before: Mon 05 Aug 2024 08:48:44 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200160
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:ba:04:c6:ea:2e:5d:11:60:6c:e6:36:3e:4f:19:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 08:48:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958c950e22394fe0e792eb817dde8cdb8a38c126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:f1:10:8f:cd:af:06:a2:9a:07:60:44:60:
c0:cb:0b:da:c8:a9:33:ad:0b:34:d0:5b:ac:73:ad:
af:e8:be:f3:3f:9c:8b:a9:c6:b2:ad:0c:34:39:b0:
4b:59:90:60:05:22:4a:92:ba:ac:24:d9:0e:23:db:
c2:d5:eb:15:e8:1a:ba:79:2b:ca:ce:66:0c:be:1b:
52:cd:e4:8b:37:8e:5f:76:63:f1:bc:87:83:db:d1:
20:71:a1:df:e0:1f:67:4f:e7:5f:83:72:dc:08:38:
af:58:b2:0f:9d:14:b8:f7:8f:36:64:aa:97:84:da:
26:8c:37:e8:59:0d:db:7e:22:f3:8c:4f:17:c9:ae:
ca:79:85:26:a1:07:85:03:73:b4:dc:2d:8d:38:99:
36:7a:3e:7f:fd:df:3d:fe:cf:da:9a:b3:24:df:5d:
79:ea:33:c7:35:f3:fb:a9:95:33:f3:0a:89:31:09:
22:39:cd:57:94:94:22:63:08:de:c5:4b:85:4f:40:
ab:f6:de:47:cb:50:d6:68:19:73:c6:03:31:24:7b:
08:60:a4:6e:23:80:3a:b4:32:bc:47:87:55:9b:dd:
0a:e2:b6:37:43:5e:0f:be:f9:24:18:4c:56:65:8a:
47:d8:e0:9a:2b:01:07:f5:fc:a7:74:32:6e:93:69:
65:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8C:95:0E:22:39:4F:E0:E7:92:EB:81:7D:DE:8C:DB:8A:38:C1:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.nap.re/repo/pongery/5/
RPKI Manifest - URI:rsync://rpki.nap.re/repo/pongery/5/958C950E22394FE0E792EB817DDE8CDB8A38C126.mft
RPKI Notify - URI:https://rpki.nap.re:3030/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200160
Signature Algorithm: sha256WithRSAEncryption
13:9f:9d:75:4c:ea:70:ae:56:e7:80:50:d3:81:5f:cf:5a:43:
79:fb:4e:a3:07:c0:2a:b9:07:f8:03:32:7b:26:33:47:b0:b9:
19:b7:e3:9d:8a:3c:fb:8b:37:10:34:5a:71:f4:17:21:0a:9b:
26:ef:f9:6f:76:14:c8:d2:a8:dd:75:35:6e:01:da:bb:09:10:
16:bc:65:80:49:fa:d2:ea:fa:57:85:db:cb:3d:3e:f8:c0:a4:
45:e6:d4:f6:af:e9:d2:03:0b:b6:ed:21:46:6f:30:c4:5c:93:
bf:2b:25:5a:a5:16:52:b7:bb:46:e4:58:39:de:aa:86:34:e1:
f7:93:3d:dd:e9:96:bc:92:89:68:09:2d:12:49:d3:32:cf:8b:
ac:c7:d2:e3:90:5c:ca:60:7b:f4:12:1d:5a:aa:61:75:c2:f5:
56:3f:b0:ba:f2:44:46:51:c3:1f:c6:8f:ff:93:49:c8:5d:8e:
4f:e0:ce:f9:9d:87:c4:e6:74:25:d0:77:30:b7:71:e3:55:9a:
7f:d3:2b:98:e7:8f:09:f6:26:8b:04:e5:2d:a0:18:4b:28:79:
e9:80:07:64:ef:10:ca:6f:94:fc:63:ea:0c:b1:d8:a6:80:75:
d4:f3:22:6f:5f:29:bb:fa:46:3c:b5:79:c6:d6:ac:72:e7:4a:
ab:83:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:01 2024 by rpki-client on console-fra.rpki-client.org